$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132302e302f32342d3234203d3e203539303738.roa File: 3133392e3139382e3132302e302f32342d3234203d3e203539303738.roa (raw, json) Hash identifier: hNa6HfKL+wM/ITNxgRyL0hVDm9ZkqY6qyJ1F2AO6TV4= Subject key identifier: 8D:CE:42:09:CE:E6:D5:7A:91:82:E0:B6:EF:94:DB:B4:8D:1A:56:FD Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 71829B1EFD1FA377C77EAAF551BC2335B0B02D7F Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132302e302f32342d3234203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:43:15 +0000 ROA not before: Wed 15 Apr 2026 07:38:15 +0000 ROA not after: Wed 14 Apr 2027 07:43:15 +0000 asID: 59078 IP address blocks: 139.198.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:82:9b:1e:fd:1f:a3:77:c7:7e:aa:f5:51:bc:23:35:b0:b0:2d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:38:15 2026 GMT Not After : Apr 14 07:43:15 2027 GMT Subject: CN=8DCE4209CEE6D57A9182E0B6EF94DBB48D1A56FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:18:eb:7d:0a:00:52:7f:60:3d:a2:c9:c4: 1b:5e:26:4e:7f:30:2d:a9:05:eb:c1:34:5a:8d:03: 45:6c:dd:cb:1e:55:52:81:37:ce:b8:b2:5f:3a:7c: 74:ef:3c:6a:2f:b9:db:f7:05:c3:d5:5b:ac:61:a4: 95:dc:4b:cb:bc:e6:39:0a:3c:55:29:a2:78:18:3d: ef:ac:6d:01:ca:5e:9b:ad:5c:65:82:95:d9:d0:2d: c2:e8:fd:9b:84:ae:71:ee:86:56:6f:2a:f1:81:2a: 81:a2:55:0b:b4:6a:94:c6:d8:99:f1:2b:3d:41:7e: df:92:39:ec:8d:39:bd:a4:f5:ae:5c:e9:28:3e:1e: 05:43:8d:2d:88:65:5d:91:77:9a:f6:2f:7b:a5:32: 86:b9:21:6c:bd:13:e9:d7:97:62:fa:c0:b0:e0:e7: 6b:5e:76:64:ed:30:ff:ce:f7:5d:20:b1:ce:ac:35: 49:a2:0d:1d:37:08:ec:47:d6:52:9a:21:9e:bc:a7: 88:a4:b2:1d:30:26:65:f5:96:db:6d:96:c4:c1:d0: c1:14:25:33:fc:bc:bf:c7:ab:3e:ab:32:38:95:0a: 43:ef:73:2d:02:31:35:30:2a:54:4d:77:29:bc:89: fd:0a:c0:ac:7a:1e:bb:d8:f8:7b:5f:20:6a:5b:ae: 5b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CE:42:09:CE:E6:D5:7A:91:82:E0:B6:EF:94:DB:B4:8D:1A:56:FD X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132302e302f32342d3234203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.120.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:b2:0e:cd:53:bd:41:4c:f8:93:c7:73:56:0e:9d:e7:f0:b7: f5:16:76:ef:e7:7c:ef:71:c3:48:c9:5d:64:37:07:87:3e:fc: 96:67:a0:6e:67:08:8a:04:ce:df:e5:85:d1:f2:fe:f2:ce:34: 10:d7:1c:62:d5:9d:5b:c8:45:a7:30:33:21:fb:f4:85:96:f9: 40:07:de:99:2c:5d:0a:54:e5:66:81:89:9d:b0:9e:7a:f2:da: db:86:9c:7c:a7:c5:5f:20:41:a3:70:06:38:d6:88:b8:c8:8b: 1f:f4:82:c2:01:b7:a7:01:bb:15:4a:d6:a3:02:f3:4e:e2:d4: 6f:8d:ca:56:91:44:16:ca:74:23:df:82:a1:fd:d2:30:2c:ec: c4:0f:93:18:20:26:10:88:79:08:1c:ba:74:14:0a:6f:3a:55: 91:cf:79:06:20:e1:b8:e2:04:67:f4:7b:d7:35:98:81:f7:f0: ab:27:12:02:dd:0c:24:9c:ef:76:ee:bf:06:7e:a8:5c:39:96: 74:53:dd:49:bc:99:80:fc:66:f7:7d:8a:0d:62:53:75:36:3b: 90:1c:a5:8f:f0:13:d7:c3:97:53:cb:e9:50:40:e1:a0:e8:4c: a4:4c:b4:47:f2:33:ff:4d:42:14:68:a7:9b:57:b0:a1:b4:7d: 1f:bc:0c:0f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcYKbHv0fo3fHfqr1UbwjNbCwLX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzM4MTVaFw0yNzA0MTQwNzQzMTVaMDMxMTAvBgNV BAMTKDhEQ0U0MjA5Q0VFNkQ1N0E5MTgyRTBCNkVGOTREQkI0OEQxQTU2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNxjrfQoAUn9gPaLJxBteJk5/ MC2pBevBNFqNA0Vs3cseVVKBN864sl86fHTvPGovudv3BcPVW6xhpJXcS8u85jkK PFUpongYPe+sbQHKXputXGWCldnQLcLo/ZuErnHuhlZvKvGBKoGiVQu0apTG2Jnx Kz1Bft+SOeyNOb2k9a5c6Sg+HgVDjS2IZV2Rd5r2L3ulMoa5IWy9E+nXl2L6wLDg 52tedmTtMP/O910gsc6sNUmiDR03COxH1lKaIZ68p4iksh0wJmX1ltttlsTB0MEU JTP8vL/Hqz6rMjiVCkPvcy0CMTUwKlRNdym8if0KwKx6HrvY+HtfIGpbrlvfAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUjc5CCc7m1XqRguC275TbtI0aVv0wHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzczOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIvGeDANBgkqhkiG9w0BAQsFAAOCAQEAHLIOzVO9QUz4k8dzVg6d 5/C39RZ27+d873HDSMldZDcHhz78lmegbmcIigTO3+WF0fL+8s40ENccYtWdW8hF pzAzIfv0hZb5QAfemSxdClTlZoGJnbCeevLa24acfKfFXyBBo3AGONaIuMiLH/SC wgG3pwG7FUrWowLzTuLUb43KVpFEFsp0I9+Cof3SMCzsxA+TGCAmEIh5CBy6dBQK bzpVkc95BiDhuOIEZ/R71zWYgffwqycSAt0MJJzvdu6/Bn6oXDmWdFPdSbyZgPxm 932KDWJTdTY7kBylj/AT18OXU8vpUEDhoOhMpEy0R/Iz/01CFGinm1ewobR9H7wM Dw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:28:03 2026 by rpki-client